cc-devflow 4.5.0 → 4.5.2

package/lib/skill-runtime/review.js

@@ -79,6 +79,7 @@ function makeFinding({
   status = 'open',
   fingerprint
 }) {
+  const confidenceScore = severityRank(severity) >= severityRank('important') ? 8 : 6;
   return {
     id,
     source,
@@ -91,7 +92,12 @@ function makeFinding({
     ...(typeof line === 'number' ? { line } : {}),
     action,
     status,
-    ...(fingerprint ? { fingerprint } : {})
+    confidenceScore,
+    fingerprint: fingerprint || `${source}:${category}:${id}`,
+    displayTier: status === 'informational'
+      ? 'info'
+      : (severityRank(severity) >= severityRank('important') ? 'blocking' : 'warning'),
+    suppressionReason: null
   };
 }
 
@@ -231,6 +237,14 @@ async function detectBaseRef(repoRoot) {
   return 'HEAD~1';
 }
 
+async function detectCurrentCommit(repoRoot) {
+  const result = await runCommand('git rev-parse --short HEAD', { cwd: repoRoot });
+  if (result.code === 0 && result.stdout.trim()) {
+    return result.stdout.trim();
+  }
+  return 'working-tree';
+}
+
 async function runCodexStructuredReview({ repoRoot, baseRef }) {
   const command = [
     'codex review',
@@ -530,6 +544,7 @@ async function runReviewSuite({ repoRoot, changeId, manifest, strict, skipReview
   const diffReview = await runDiffReviewSection({ repoRoot, strict, skipReview });
   const findings = flattenFindings(taskReviews, diffReview);
   const status = deriveReviewStatus(taskReviews, diffReview);
+  const currentCommit = await detectCurrentCommit(repoRoot);
   const details = [
     taskReviews.summary,
     diffReview.summary
@@ -539,6 +554,54 @@ async function runReviewSuite({ repoRoot, changeId, manifest, strict, skipReview
     status,
     summary: `Task review: ${taskReviews.status}. Diff review: ${diffReview.status}.`,
     details,
+    freshness: {
+      status: 'fresh',
+      reviewedCommit: currentCommit,
+      currentCommit,
+      commitsSinceReview: 0,
+      staleReason: ''
+    },
+    qualityScore: status === 'pass' ? 9 : (status === 'blocked' ? 5 : 3),
+    specialistReviews: [
+      {
+        name: 'testing',
+        status: taskReviews.status,
+        required: true,
+        summary: taskReviews.summary,
+        skipReason: '',
+        findings: []
+      }
+    ],
+    runtime: {
+      status: status === 'pass' ? 'pass' : (status === 'fail' ? 'fail' : 'blocked'),
+      failureOwnership: []
+    },
+    qa: {
+      status: 'pass',
+      regressionProof: [],
+      testQuality: [],
+      coverageAudit: {
+        status: 'pass',
+        coveragePct: null,
+        pathMap: [],
+        gaps: [],
+        testsAdded: [],
+        e2eRequired: false,
+        evalRequired: false,
+        qualityStars: ''
+      },
+      browserEvidence: {
+        status: 'skipped',
+        mode: 'not-applicable',
+        affectedRoutes: [],
+        screenshots: [],
+        consoleErrors: [],
+        healthScore: null,
+        issues: [],
+        skipReason: 'runtime verify did not identify a UI browser QA target'
+      },
+      tddException: null
+    },
     taskReviews,
     diffReview,
     findings

package/lib/skill-runtime/schemas.js

@@ -269,8 +269,26 @@ const GateResultSchema = z.object({
 });
 
 const ReviewSeveritySchema = z.enum(['critical', 'important', 'minor', 'info']);
-const ReviewActionSchema = z.enum(['fix_now', 'follow_up', 'cc-investigate', 'none']);
-const ReviewFindingStatusSchema = z.enum(['open', 'resolved', 'accepted', 'informational']);
+const ReviewActionSchema = z.enum([
+  'fix_now',
+  'follow_up',
+  'cc-investigate',
+  'reroute-cc-do',
+  'reroute-cc-plan',
+  'reroute-cc-investigate',
+  'document-follow-up',
+  'none'
+]);
+const ReviewFindingStatusSchema = z.enum([
+  'open',
+  'resolved',
+  'accepted',
+  'informational',
+  'accepted-fixed',
+  'rejected-with-evidence',
+  'deferred-minor',
+  'clarification-needed'
+]);
 
 const ReviewEvidenceSchema = z.object({
   kind: z.enum(['command', 'file', 'note']),
@@ -291,7 +309,11 @@ const ReviewFindingSchema = z.object({
   line: z.number().int().min(1).optional(),
   action: ReviewActionSchema.default('none'),
   status: ReviewFindingStatusSchema.default('open'),
-  fingerprint: z.string().optional()
+  fingerprint: z.string().optional(),
+  confidence: z.enum(['high', 'medium', 'low']).optional(),
+  confidenceScore: z.number().min(1).max(10).optional(),
+  displayTier: z.enum(['blocking', 'warning', 'info', 'suppressed']).optional(),
+  suppressionReason: z.string().nullable().optional()
 });
 
 const ReviewerResultSchema = z.object({
@@ -317,6 +339,28 @@ const ReportReviewSchema = z.object({
   status: ReviewDecisionStatusSchema.default('skipped'),
   summary: z.string().default(''),
   details: z.string().default(''),
+  freshness: z.object({
+    status: z.enum(['fresh', 'stale', 'unknown', 'not-applicable']).default('unknown'),
+    reviewedCommit: z.string().default(''),
+    currentCommit: z.string().default(''),
+    commitsSinceReview: z.number().int().min(0).nullable().default(null),
+    staleReason: z.string().default('')
+  }).default({
+    status: 'unknown',
+    reviewedCommit: '',
+    currentCommit: '',
+    commitsSinceReview: null,
+    staleReason: ''
+  }),
+  qualityScore: z.number().min(0).max(10).nullable().default(null),
+  specialistReviews: z.array(z.object({
+    name: z.string().min(1),
+    status: ReviewDecisionStatusSchema,
+    required: z.boolean().default(false),
+    summary: z.string().default(''),
+    skipReason: z.string().default(''),
+    findings: z.array(ReviewFindingSchema).default([])
+  })).default([]),
   taskReviews: ReviewSectionSchema.default({
     status: 'skipped',
     required: false,
@@ -334,15 +378,118 @@ const ReportReviewSchema = z.object({
   findings: z.array(ReviewFindingSchema).default([])
 });
 
+const ClaimEvidenceSchema = z.object({
+  claim: z.string().min(1),
+  requiredProof: z.string().min(1),
+  commandOrArtifact: z.string().min(1),
+  exitStatus: z.number().int().nullable().optional(),
+  keyObservation: z.string().default(''),
+  status: ReviewDecisionStatusSchema
+});
+
+const RuntimeFailureOwnershipSchema = z.object({
+  failure: z.string().min(1),
+  classification: z.enum(['in-branch', 'pre-existing', 'environment', 'ambiguous']),
+  touchedByDiff: z.boolean().optional(),
+  evidence: z.string().default(''),
+  action: z.string().default(''),
+  status: z.string().default('open')
+});
+
+const ReportRuntimeSchema = z.object({
+  status: ReviewDecisionStatusSchema.default('skipped'),
+  failureOwnership: z.array(RuntimeFailureOwnershipSchema).default([])
+}).default({
+  status: 'skipped',
+  failureOwnership: []
+});
+
+const QaSchema = z.object({
+  status: ReviewDecisionStatusSchema.default('skipped'),
+  regressionProof: z.array(z.record(z.any())).default([]),
+  testQuality: z.array(z.record(z.any())).default([]),
+  coverageAudit: z.object({
+    status: ReviewDecisionStatusSchema.default('skipped'),
+    coveragePct: z.number().nullable().default(null),
+    pathMap: z.array(z.string()).default([]),
+    gaps: z.array(z.string()).default([]),
+    testsAdded: z.array(z.string()).default([]),
+    e2eRequired: z.boolean().default(false),
+    evalRequired: z.boolean().default(false),
+    qualityStars: z.string().default('')
+  }).default({
+    status: 'skipped',
+    coveragePct: null,
+    pathMap: [],
+    gaps: [],
+    testsAdded: [],
+    e2eRequired: false,
+    evalRequired: false,
+    qualityStars: ''
+  }),
+  browserEvidence: z.object({
+    status: ReviewDecisionStatusSchema.default('skipped'),
+    mode: z.string().default('not-applicable'),
+    affectedRoutes: z.array(z.string()).default([]),
+    screenshots: z.array(z.string()).default([]),
+    consoleErrors: z.array(z.string()).default([]),
+    healthScore: z.number().nullable().default(null),
+    issues: z.array(z.record(z.any())).default([]),
+    skipReason: z.string().default('')
+  }).default({
+    status: 'skipped',
+    mode: 'not-applicable',
+    affectedRoutes: [],
+    screenshots: [],
+    consoleErrors: [],
+    healthScore: null,
+    issues: [],
+    skipReason: ''
+  }),
+  tddException: z.string().nullable().default(null)
+}).default({
+  status: 'skipped',
+  regressionProof: [],
+  testQuality: [],
+  coverageAudit: {
+    status: 'skipped',
+    coveragePct: null,
+    pathMap: [],
+    gaps: [],
+    testsAdded: [],
+    e2eRequired: false,
+    evalRequired: false,
+    qualityStars: ''
+  },
+  browserEvidence: {
+    status: 'skipped',
+    mode: 'not-applicable',
+    affectedRoutes: [],
+    screenshots: [],
+    consoleErrors: [],
+    healthScore: null,
+    issues: [],
+    skipReason: ''
+  },
+  tddException: null
+});
+
 const ReportCardSchema = z.object({
   changeId: ChangeIdSchema,
   verdict: z.enum(['pass', 'fail', 'blocked']).optional(),
   overall: z.enum(['pass', 'fail']),
   summary: z.string().default(''),
+  specAlignment: z.enum(['pass', 'fail', 'blocked']).default('blocked'),
+  specDeltaVerified: z.boolean().default(false),
+  specSyncReady: z.boolean().default(false),
+  runtime: ReportRuntimeSchema,
+  claimEvidence: z.array(ClaimEvidenceSchema).default([]),
+  qa: QaSchema,
   quickGates: z.array(GateResultSchema),
   strictGates: z.array(GateResultSchema),
   review: ReportReviewSchema,
   blockingFindings: z.array(z.string()),
+  gaps: z.array(z.string()).default([]),
   reroute: z.enum(['none', 'cc-do', 'cc-investigate', 'cc-plan']).default('none'),
   timestamp: z.string().datetime()
 });

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "cc-devflow",
-    "version": "4.5.0",
+    "version": "4.5.2",
     "description": "Multi-platform CLI and skill pack for agent coding",
     "main": "bin/cc-devflow.js",
     "bin": {
@@ -21,6 +21,12 @@
         "docs/",
         "README.md",
         "README.zh-CN.md",
+        "CONTRIBUTING.md",
+        "CONTRIBUTING.zh-CN.md",
+        "CODE_OF_CONDUCT.md",
+        "CODE_OF_CONDUCT.zh-CN.md",
+        "SECURITY.md",
+        "SECURITY.zh-CN.md",
         "CHANGELOG.md",
         "LICENSE",
         "package.json"